[]byte) []byte { for i := range ek.t { b = polyByteEncode(b, ek.t[i]) } b = append(b, ek.ρ[:]...) return b } // encryptionKey1024 is the parsed and expanded form of a PKE encryption key. type encryptionKey1024 struct { t [k1024]nttElement // ByteDecode₁₂(ek[:384k]) a [k1024 * k1024]nttElement // A[i*k+j] = sampleNTT(ρ, j, i) } // decryptionKey1024 is the parsed and expanded form of a PKE decryption key. type decryptionKey1024 struct { s [k1024]nttElement // ByteDecode₁₂(dk[:decryptionKey1024Siz])...

- When a pod is done or not going to run, then `ResourceClaims` for it can be reused by other pods or deleted. ([#118817](https://github.com/kubernetes/kubernetes/pull/118817), [@pohly](https://github.com/pohly))
- With the `KubeletCgroupDriverFromCRI` feature gate enabled and sufficiently new version of a container

## Changes by Kind

### Deprecation

#### kube-apiserver:
- the following deprecated APIs can no longer be served:
  - All resources under `apps/v1beta1` and `apps/v1beta2` - use `apps/v1` instead
  - `daemonsets`, `deployments`, `replicasets` resources under `extensions/v1beta1` - use `apps/v1` instead

- Unreserve extension point for scheduler plugins is merged into Reserve extension point ([#92200](https://github.com/kubernetes/kubernetes/pull/92200), [@adtac](https://github.com/adtac)) [SIG Scheduling and Testing]

pkg flag, func Lookup(string) *Flag
pkg flag, func NArg() int
pkg flag, func NFlag() int
pkg flag, func NewFlagSet(string, ErrorHandling) *FlagSet
pkg flag, func Parse()
pkg flag, func Parsed() bool
pkg flag, func PrintDefaults()
pkg flag, func Set(string, string) error
pkg flag, func String(string, string, string) *string
pkg flag, func StringVar(*string, string, string, string)

- kube-controller-manager currently needs a writable `--cert-dir` (default is `/var/run/kubernetes`) for generating self-signed certificates, when no `--tls-cert-file` or `--tls-private-key-file` are provided.

v.ua

// Val Town, Inc : https://val.town/
// Submitted by Tom MacWright <******@****.***>
express.val.run
web.val.run

// Vercel, Inc : https://vercel.com/
// Submitted by Max Leiter <security@vercel.com>
vercel.app
v0.build
vercel.dev
vusercontent.net
now.sh

// VeryPositive SIA : http://very.lv
// Submitted by Danko Aleksejevs <******@****.***>
2038.io

proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to be redirected to the API Server through its private network.

The merged fix enforces validation against the proxying address for a Node. In some cases, the fix can break clients that depend on the `nodes/proxy` subresource, specifically if a kubelet advertises a localhost or link-local address to the Kubernetes control...